Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251451 6.5 警告 IBM - 複数の IBM 製品 の KPI コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4816 2012-03-14 16:08 2012-02-14 Show GitHub Exploit DB Packet Storm
251452 4 警告 IBM - 複数の IBM 製品 の Help メニューの About オプションにおける詳細不明な脆弱性 CWE-200
情報漏えい 		CVE-2011-4817 2012-03-14 16:07 2012-02-14 Show GitHub Exploit DB Packet Storm
251453 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4818 2012-03-14 16:06 2012-02-14 Show GitHub Exploit DB Packet Storm
251454 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4819 2012-03-14 16:05 2012-02-14 Show GitHub Exploit DB Packet Storm
251455 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0195 2012-03-14 16:04 2012-02-14 Show GitHub Exploit DB Packet Storm
251456 5 警告 アップル - Apple Safari の WebKit における認証情報をキャプチャされる脆弱性 CWE-200
情報漏えい 		CVE-2012-0647 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
251457 5 警告 アップル - Apple Safari の WebKit におけるユーザを追跡される脆弱性 CWE-200
情報漏えい 		CVE-2012-0640 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
251458 6.4 警告 アップル - Windows 上で稼働する Apple Safari の IDN 機能におけるドメイン名を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0584 2012-03-14 15:34 2012-03-12 Show GitHub Exploit DB Packet Storm
251459 6.4 警告 VMware - VMware vCenter Chargeback Manager における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1472 2012-03-14 15:15 2012-03-8 Show GitHub Exploit DB Packet Storm
251460 5 警告 yaSSL - yaSSL CyaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1558 2012-03-14 11:53 2012-03-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254881 4.7 MEDIUM
Network 		atlassian http_library The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a … CWE-20
 Improper Input Validation  		CVE-2017-18103 2024-11-21 12:19 2018-07-18 Show GitHub Exploit DB Packet Storm
254882 7.8 HIGH
Local 		qualcomm msm8996au_firmware
sd_450_firmware
sd_625_firmware
sd_820_firmware
sd_820a_firmware
sd_835_firmware 		While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to … CWE-20
 Improper Input Validation  		CVE-2017-18155 2024-11-21 12:19 2018-07-12 Show GitHub Exploit DB Packet Storm
254883 7.8 HIGH
Local 		google android In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller tha… CWE-125
Out-of-bounds Read 		CVE-2017-18159 2024-11-21 12:19 2018-07-7 Show GitHub Exploit DB Packet Storm
254884 7.8 HIGH
Local 		google android Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-18158 2024-11-21 12:19 2018-07-7 Show GitHub Exploit DB Packet Storm
254885 9.8 CRITICAL
Network 		pyyaml
fedoraproject 		pyyaml
fedora 		In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced f… CWE-502
 Deserialization of Untrusted Data 		CVE-2017-18342 2024-11-21 12:19 2018-06-27 Show GitHub Exploit DB Packet Storm
254886 5.5 MEDIUM
Local 		google android User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel. CWE-617
 Reachable Assertion 		CVE-2017-18169 2024-11-21 12:19 2018-06-16 Show GitHub Exploit DB Packet Storm
254887 7.8 HIGH
Local 		google android In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable "event->num_ndp_end_rsp_per_ndi_list" is very large which can then lead … CWE-119
CWE-190
Incorrect Access of Indexable Resource ('Range Error') 
 Integer Overflow or Wraparound 		CVE-2017-18070 2024-11-21 12:19 2018-06-13 Show GitHub Exploit DB Packet Storm
254888 9.8 CRITICAL
Network 		pvpgn stats An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter. CWE-89
SQL Injection 		CVE-2017-18291 2024-11-21 12:19 2018-06-13 Show GitHub Exploit DB Packet Storm
254889 9.8 CRITICAL
Network 		pvpgn stats An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter. CWE-89
SQL Injection 		CVE-2017-18290 2024-11-21 12:19 2018-06-13 Show GitHub Exploit DB Packet Storm
254890 9.8 CRITICAL
Network 		pvpgn stats An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter. CWE-89
SQL Injection 		CVE-2017-18289 2024-11-21 12:19 2018-06-13 Show GitHub Exploit DB Packet Storm